ipa-replica-manage(1)

NAME
ipa-replica-manage - Manage an IPA replica

SYNOPSIS
ipa-replica-manage [OPTION]... [add|del|list|init|synch] [SERVER]

DESCRIPTION
Manages the replication agreements of an IPA server.

add - Adds a new replication agreement between two existing IPA servers

del - Removes a replication agreement

list - Lists the hostnames that HOST IPA server has agreements with

init - Forces a full initialization of the IPA server on SERVER from HOST

synch - Immediately flush any data to be replicated to SERVER

OPTIONS

-H HOST, --host=HOST
    The IPA server to manage

-p DM_PASSWORD, --password=DM_PASSWORD
    The Directory Manager password to use for authentication

-v, --verbose
    Provide additional information

--winsync
    Specifies to create/use a Windows Sync Agreement

--port=SERVER_PORT
    Port number of other server (default is 636, the LDAPS port)

--binddn=ADMIN_DN
    Bind DN to use with remote server (default is cn=Directory Manager) - Be careful to quote this value on the command line

--bindpw=ADMIN_PWD
    Password for Bind DN to use with remote server (default is the DM_PASSWORD above)

--cacert=/path/to/cacertfile
    Full path and filename of CA certificate to use with TLS/SSL to the remote server - this CA certificate will be installed in the directory server's certificate database

--win-subtree=cn=Users,dc=example,dc=com
    DN of Windows subtree containing the users you want to sync (default cn=Users,<domain suffix> - this is typically what Windows AD uses as the default value) - Be careful to quote this value on the command line

--passsync=PASSSYNC_PWD
    Password for the Windows PassSync user.

EXIT STATUS
0 if the command was successful 1 if an error occurred